Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          Zp/yT+kZHYiJku2AdlWwpWxZVM16k2AVqwfTLoZGf4o=
Subject key identifier:   BF:9E:65:87:B1:C8:9C:40:E3:F7:00:79:7C:E0:FA:1F:AC:6F:DF:D5
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       39889084BD71BEC528182E3DF1B871A1B3DEE3F1
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa
Signing time:             Tue 05 May 2026 21:33:40 +0000
ROA not before:           Tue 05 May 2026 21:28:40 +0000
ROA not after:            Tue 04 May 2027 21:33:40 +0000
asID:                     52587
IP address blocks:        177.87.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:88:90:84:bd:71:be:c5:28:18:2e:3d:f1:b8:71:a1:b3:de:e3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: May  5 21:28:40 2026 GMT
            Not After : May  4 21:33:40 2027 GMT
        Subject: CN=BF9E6587B1C89C40E3F700797CE0FA1FAC6FDFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:bb:58:b9:c8:1a:e6:f8:4c:e9:91:36:e1:
                    80:a4:09:78:08:28:4d:4a:3e:84:1d:62:ae:10:32:
                    f1:85:50:ef:db:e1:69:eb:22:bf:4a:72:67:76:a3:
                    16:92:6c:30:21:e0:2b:85:99:26:54:ad:48:23:dc:
                    6c:e7:e1:21:34:17:d4:4e:9b:34:62:47:94:2e:c2:
                    53:eb:ce:d7:0d:04:6e:de:42:22:d7:16:01:d3:78:
                    15:d4:3e:80:7f:5e:11:04:d9:ee:b3:c9:10:e2:fe:
                    d6:2e:34:37:2e:bf:15:99:25:7b:98:28:bb:de:9a:
                    64:5d:06:8f:42:4c:f1:fc:09:ad:72:f6:be:e4:f9:
                    57:49:9d:ad:b1:14:b1:ae:6c:51:18:86:b3:66:49:
                    92:8e:64:26:53:33:c3:cb:7d:1e:29:47:ce:1c:45:
                    b4:fe:6e:31:59:cb:0e:b7:f9:7d:5c:d2:0b:af:1e:
                    e5:0a:92:b0:49:5d:aa:57:c1:1d:6d:08:1e:cb:ac:
                    0c:dc:c2:81:02:24:be:a2:0a:3f:c7:ee:7c:4b:d6:
                    0b:50:0c:d3:34:6f:18:f9:8c:3e:fc:20:b7:6e:64:
                    bb:f6:fd:24:5a:c1:66:40:a9:cb:ab:59:e4:25:dc:
                    46:1f:ea:23:24:cb:32:67:59:d7:fe:54:ab:1d:73:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:65:87:B1:C8:9C:40:E3:F7:00:79:7C:E0:FA:1F:AC:6F:DF:D5
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0e:45:4a:ed:2f:73:82:9a:1a:20:62:c1:ee:84:62:25:40:
         d6:ef:81:e2:98:a1:78:5e:b4:ce:3e:1b:fa:cd:47:79:bd:7b:
         4d:38:0f:4c:8d:8b:15:e6:fe:93:3f:84:fb:06:41:49:be:9e:
         33:1c:40:47:4d:a7:b3:22:52:ac:05:75:36:a3:26:e9:e0:00:
         3d:2e:8b:bb:60:60:e2:27:8a:b2:f9:d7:a7:ea:6d:4d:79:7c:
         0e:9a:41:73:6a:43:cf:61:41:b4:10:12:e7:2e:f1:a5:43:16:
         f5:b6:66:9d:8d:12:db:11:4c:3c:bb:7f:07:69:63:e0:d2:8f:
         e1:b1:d2:a0:89:c9:8e:fc:32:bf:a6:8f:85:bc:8a:03:6d:14:
         f9:cd:7e:76:d9:5f:8f:ae:9a:4f:27:e0:ae:c0:b6:18:b7:ca:
         d3:fb:5c:52:8c:71:32:60:0f:80:aa:a6:c3:0a:80:c2:1d:ee:
         81:69:97:0f:8d:55:38:d7:8a:82:3c:88:33:51:fc:a4:f3:b3:
         f1:89:8e:07:79:41:b0:0b:76:f9:35:9c:76:30:3d:dd:27:2d:
         e5:cd:54:b6:89:5e:6d:16:f3:11:e1:3d:97:81:04:0e:32:0f:
         3a:71:68:39:f6:dc:60:7e:78:60:91:8e:a3:23:b7:b1:c0:33:
         b2:67:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:55:23 2026 by rpki-client